Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/If0hUFsnsKu11Lw7UT8wjFKEcGU.roa
File: If0hUFsnsKu11Lw7UT8wjFKEcGU.roa (raw, json)
Hash identifier: J8clHPbHwCRpU0a7T8HKUDX4iAqGAFbl/+sVLJFRSzI=
Subject key identifier: 21:FD:21:50:5B:27:B0:AB:B5:D4:BC:3B:51:3F:30:8C:52:84:70:65
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0ED5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/If0hUFsnsKu11Lw7UT8wjFKEcGU.roa
Signing time: Mon 26 May 2025 20:38:44 +0000
ROA not before: Mon 26 May 2025 20:38:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 20:38:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=21FD21505B27B0ABB5D4BC3B513F308C52847065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:40:0c:a3:e2:23:4a:c0:a0:ee:f0:c0:d8:
c2:cf:f3:4a:d7:3f:02:40:e4:d8:a8:9a:a3:ee:de:
34:52:4c:0d:a3:82:0c:80:ad:4f:25:44:d6:a4:d0:
f7:e7:cd:21:1f:8a:d0:27:5a:72:d2:b6:a2:8d:12:
a7:74:18:10:91:59:6b:1c:a2:71:b5:25:2b:98:1f:
a9:4b:d1:0a:90:96:ab:38:29:a4:3b:2a:89:7b:a9:
b7:a1:fc:48:b4:79:ac:df:24:b5:f8:a3:7b:13:81:
69:f2:db:93:01:e2:c0:11:ff:ff:43:57:48:c7:33:
8f:74:83:ef:f9:ba:91:a6:31:d5:30:80:fb:6a:04:
d7:b1:24:e0:b7:a5:86:b1:6b:f6:08:b5:e5:4b:26:
03:ba:d8:48:05:0d:4e:dc:2e:73:d2:bc:57:36:b3:
9c:60:01:ee:d3:06:0e:b7:bb:5f:e4:dc:f8:78:17:
3f:47:00:ca:de:e5:99:42:ec:bb:05:e6:89:22:3d:
52:a7:60:b0:2d:6b:ef:f5:61:1d:9a:a1:d3:b6:70:
29:eb:02:24:23:3c:61:1e:e4:70:88:46:8f:2e:44:
d2:96:07:65:1d:a6:0b:9a:33:69:62:30:a1:95:75:
ed:f5:0b:73:b7:a9:09:cb:a7:fa:df:40:02:49:39:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:21:50:5B:27:B0:AB:B5:D4:BC:3B:51:3F:30:8C:52:84:70:65
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/If0hUFsnsKu11Lw7UT8wjFKEcGU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:62:42:99:be:aa:7b:b5:72:68:02:e0:71:8e:74:c5:86:15:
a8:5f:41:b5:a7:6a:1f:67:36:8d:34:85:52:c5:13:f9:65:96:
09:2b:84:f9:7e:e3:04:e5:4d:ec:cc:44:7b:18:ee:d3:17:55:
1c:e3:ea:14:52:e2:6b:8f:62:8e:e1:da:05:b1:95:13:26:e5:
d1:fa:df:d3:92:53:ae:d3:63:76:97:f8:88:29:d0:c9:06:47:
98:be:ff:f5:e8:a1:72:6f:7f:24:32:4e:ac:6a:31:6a:36:1a:
ec:8e:7e:53:6a:0e:3d:b4:27:cf:1e:8d:e5:df:0b:b3:ef:e8:
83:5c:2a:6f:a1:fa:c9:85:fe:5a:42:88:fe:b8:3d:b3:ca:6d:
22:4b:98:24:32:cd:45:e3:dc:47:8c:ba:92:be:81:86:ed:75:
a2:db:da:21:f4:46:19:28:9a:f3:f3:04:93:d4:f3:c6:a5:4d:
65:91:29:86:38:66:8d:c8:f5:49:91:3c:81:4b:c8:d3:18:23:
79:bc:6d:72:43:50:14:b3:da:43:ad:4b:e0:55:3c:3e:73:f2:
9f:7f:d3:58:bb:e4:c9:30:a7:ea:ed:2a:9d:aa:6f:a3:3d:94:
e0:02:9e:3f:85:b6:ee:a9:f8:d8:f1:48:28:79:08:bd:2e:a0:
fe:f9:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:54 2025 by rpki-client